CVE-2005-0254
low-risk
Published 2005-05-02
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.
Do I need to act?
-
0.86% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.7/10
Low
NETWORK
/ HIGH complexity
Affected Products (2)
Biborb
Biborb
Affected Vendors
References (6)
Broken Link
http://www.securityfocus.com/bid/12583
Broken Link
http://www.securityfocus.com/bid/12583
23
/ 100
low-risk
Severity
13/34 · Low
Exploitability
3/34 · Minimal
Exposure
7/34 · Low